Supply Chain Incidents

MAL-2026-3638

Malicious code in openai-spellcheckers (PyPI)

MAL-2026-3619

Malicious code in txwrap (PyPI)

MAL-2026-3615

Malicious code in ai-spellcheckers (PyPI)

MAL-2026-3607

Malicious code in guardrails-ai (PyPI)

MAL-2026-3608

Malicious code in mistralai (PyPI)

MAL-2026-3431

Malicious code in apkeep (PyPI)

MAL-2026-3429

Malicious code in openai-spellchecker (PyPI)

MAL-2026-3428

Malicious code in xxx-bale (PyPI)

GHSA-m5p4-gvpx-4mvr

GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

MAL-2026-3426

Malicious code in mpkg123 (PyPI)

MAL-2026-3425

Malicious code in xxoo-bale (PyPI)

MAL-2026-3424

Malicious code in dlocal-cli (PyPI)

MAL-2026-3413

Malicious code in django-b64-img (PyPI)

MAL-2026-3411

Malicious code in web3-py-checksum (PyPI)

MAL-2026-3408

Malicious code in textwrap-ext (PyPI)

MAL-2026-3407

Malicious code in textwrap-toolkit (PyPI)

MAL-2026-3406

Malicious code in ggfmttygl-new (PyPI)

MAL-2026-3405

Malicious code in ggfmttygl (PyPI)

MAL-2026-3401

Malicious code in bttcli (PyPI)

MAL-2026-3402

Malicious code in python-bittensor-config-v2 (PyPI)

MAL-2026-3403

Malicious code in textwrap-formatter (PyPI)

MAL-2026-3398

Malicious code in ninja-ssh-proto (PyPI)

MAL-2026-3396

Malicious code in ninja-core-optimizer (PyPI)

MAL-2026-3389

Malicious code in eth-wallet-kit (PyPI)